VYPR
← All advisories
High severity8.2NVD Advisory· Published Dec 18, 2023· Updated Jun 17, 2026

CVE-2023-41314

CVE-2023-41314

Description

The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE node. Please upgrade to 2.0.3 to fix these issues.

Affected products

2
  • Apache/Doris
    cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*
    Range: <2.0.3
  • Apache Software Foundation/Apache Dorisv5
    Range: 1.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.